kafbat-ui-fips

Direct Vulnerabilities

Known vulnerabilities in the kafbat-ui-fips package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free
VulnerabilityVulnerable Version
  • L
Uncontrolled Memory Allocation

<1.5.0-r10
  • L
GHSA-6cx8-rjf8-pr8g

<1.5.0-r10
  • L
Allocation of Resources Without Limits or Throttling

<1.5.0-r10
  • L
GHSA-4v53-57pg-c464

<1.5.0-r10
  • L
GHSA-mcr4-qmvw-px4g

<1.5.0-r10
  • L
GHSA-343h-94h5-c4wr

<1.5.0-r10
  • L
Time-of-check Time-of-use (TOCTOU)

<1.5.0-r10
  • L
Uncontrolled Memory Allocation

<1.5.0-r10
  • L
Uncontrolled Recursion

<1.5.0-r10
  • L
GHSA-gm45-99xc-r7wv

<1.5.0-r10
  • L
GHSA-wv8q-qhhj-9h54

<1.5.0-r9
  • L
CVE-2026-91777

<1.5.0-r9
  • L
GHSA-cxp5-3px4-pw24

<1.5.0-r9
  • L
CVE-2026-91776

<1.5.0-r9
  • L
CVE-2026-19032

<1.5.0-r8
  • L
GHSA-wjgm-6hv5-3cvf

<1.5.0-r8
  • L
CVE-2026-83557

<1.5.0-r8
  • L
GHSA-q4xh-88c3-wmh7

<1.5.0-r8
  • L
CVE-2026-68497

<1.5.0-r8
  • L
GHSA-gx83-3vf8-gh7j

<1.5.0-r8
  • L
GHSA-6qm2-mcq7-53qp

<1.4.2-r4
  • L
CVE-2026-18401

<1.4.2-r4
  • H
Information Exposure Through Caching

<1.5.0-r7
  • L
GHSA-qv9r-c865-cp47

<1.5.0-r7
  • L
GHSA-8c42-7qj2-3j46

<1.5.0-r7
  • L
Improper Encoding or Escaping of Output

<1.5.0-r7
  • H
Missing Release of Resource after Effective Lifetime

<1.5.0-r6
  • L
GHSA-659m-px2c-25wj

<1.5.0-r6
  • C
Insufficient Verification of Data Authenticity

<1.5.0-r6
  • L
GHSA-wxpp-56q6-5pcg

<1.5.0-r6
  • L
HTTP Request Smuggling

<1.5.0-r6
  • L
GHSA-jppx-w49h-x2qq

<1.5.0-r6
  • L
GHSA-563q-j3cm-6jxm

<1.5.0-r6
  • L
GHSA-xmv7-r254-6q78

<1.5.0-r6
  • L
GHSA-4mp9-239f-g9hg

<1.5.0-r6
  • L
GHSA-jrv5-8w28-4265

<1.5.0-r6
  • M
Allocation of Resources Without Limits or Throttling

<1.5.0-r6
  • H
HTTP Request Smuggling

<1.5.0-r6
  • L
GHSA-c2gf-v879-257j

<1.5.0-r6
  • L
GHSA-676x-f7gg-47vc

<1.5.0-r6
  • L
GHSA-mq64-j8f9-9gcj

<1.5.0-r6
  • L
GHSA-93wv-jw9v-4972

<1.5.0-r6
  • M
CVE-2026-41852

<1.5.0-r6
  • L
GHSA-q4f6-jm68-57ww

<1.5.0-r6
  • L
GHSA-5x3r-wrvg-rp6q

<1.5.0-r6
  • H
Loop with Unreachable Exit Condition ('Infinite Loop')

<1.5.0-r6
  • L
GHSA-gcjf-9mgh-3p7g

<1.5.0-r6
  • L
Resource Exhaustion

<1.5.0-r6
  • L
GHSA-6cqp-g7gg-8hr5

<1.5.0-r6
  • L
GHSA-72pg-x5f8-j25j

<1.5.0-r6
  • L
Improper Verification of Cryptographic Signature

<1.5.0-r6
  • M
HTTP Request Smuggling

<1.5.0-r6
  • L
GHSA-mfg7-5gfp-c4w3

<1.5.0-r6
  • L
GHSA-xx22-p4ch-683r

<1.5.0-r6
  • L
GHSA-c653-97m9-rcg9

<1.5.0-r6
  • L
GHSA-hvcg-qmg6-jm4c

<1.5.0-r6
  • L
GHSA-83f7-v6px-pp3h

<1.5.0-r6
  • L
CVE-2026-41720

<1.5.0-r6
  • L
GHSA-4hfh-6x8g-gwpp

<1.5.0-r6
  • L
GHSA-mvh2-crg5-v77c

<1.5.0-r6
  • L
GHSA-cjpg-rgq5-fr37

<1.5.0-r6
  • L
CVE-2026-41843

<1.5.0-r6
  • L
Use of Insufficiently Random Values

<1.5.0-r6
  • L
GHSA-c69g-56f8-xwqj

<1.5.0-r6
  • L
CVE-2026-41842

<1.5.0-r6
  • L
Allocation of Resources Without Limits or Throttling

<1.5.0-r6
  • L
Resource Exhaustion

<1.5.0-r6
  • C
Insufficient Verification of Data Authenticity

<1.5.0-r6
  • L
NULL Pointer Dereference

<1.5.0-r6
  • M
CVE-2026-41844

<1.5.0-r6
  • L
GHSA-h3qp-gqrc-q736

<1.5.0-r6
  • L
GHSA-x4gw-5cx5-pgmh

<1.5.0-r6
  • H
CVE-2026-41851

<1.5.0-r6
  • L
CVE-2026-41850

<1.5.0-r6
  • L
GHSA-558v-64gr-wgg4

<1.5.0-r6
  • L
GHSA-9f52-rjqv-25qv

<1.5.0-r6
  • L
CVE-2026-41839

<1.5.0-r6
  • H
Resource Exhaustion

<1.5.0-r6
  • L
GHSA-6jqx-86gh-f27w

<1.5.0-r6
  • H
CVE-2026-41848

<1.5.0-r6
  • L
CVE-2026-41853

<1.5.0-r6
  • H
Allocation of Resources Without Limits or Throttling

<1.5.0-r6
  • L
Information Exposure

<1.5.0-r6
  • L
Improper Access Control

<1.5.0-r6
  • L
GHSA-r5w3-xv2f-j59q

<1.5.0-r6
  • L
GHSA-3qp7-7mw8-wx86

<1.5.0-r6
  • H
Resource Exhaustion

<1.5.0-r6
  • L
GHSA-x23c-287f-qqv5

<1.5.0-r6
  • L
CVE-2026-41840

<1.5.0-r6
  • L
GHSA-5pvg-856g-cp85

<1.5.0-r6
  • L
Improper Access Control

<1.5.0-r6
  • M
CRLF Injection

<1.5.0-r6
  • L
Resource Exhaustion

<1.5.0-r6
  • L
GHSA-w573-9ffj-6ff9

<1.5.0-r6
  • L
Resource Exhaustion

<1.5.0-r6
  • L
CVE-2026-41841

<1.5.0-r6
  • L
GHSA-5gvw-p9qm-jgwh

<1.5.0-r5
  • L
GHSA-mhm7-754m-9p8w

<1.5.0-r5
  • L
Incorrect Authorization

<1.5.0-r5
  • L
GHSA-5jmj-h7xm-6q6v

<1.5.0-r5
  • L
Improperly Controlled Modification of Dynamically-Determined Object Attributes

<1.5.0-r5
  • L
GHSA-293q-567p-wmwq

<1.5.0-r4
  • H
CVE-2026-47838

<1.5.0-r4
  • L
GHSA-jhq6-gfmj-v8fx

<1.5.0-r3
  • L
GHSA-p47f-322f-whfh

<1.5.0-r3
  • L
CVE-2026-10532

<1.5.0-r3
  • L
CVE-2026-9828

<1.5.0-r3
  • L
Incomplete Blacklist

<1.5.0-r2
  • L
GHSA-j3rv-43j4-c7qm

<1.5.0-r2
  • L
GHSA-hgj6-7826-r7m5

<1.5.0-r2
  • L
Incorrect Authorization

<1.5.0-r2
  • L
GHSA-9fxm-vc8v-hj55

<1.5.0-r2
  • L
Incorrect Authorization

<1.5.0-r2
  • L
GHSA-5hh8-q8hv-fr38

<1.5.0-r2
  • L
GHSA-rmj7-2vxq-3g9f

<1.5.0-r2
  • L
GHSA-rcqc-6cw3-h962

<1.5.0-r2
  • L
Incomplete Blacklist

<1.5.0-r2
  • L
Server-Side Request Forgery (SSRF)

<1.5.0-r2
  • L
Improperly Controlled Modification of Dynamically-Determined Object Attributes

<1.5.0-r2
  • L
Information Exposure

<1.5.0-r0
  • L
CVE-2025-12183

<1.5.0-r0
  • L
GHSA-cmp6-m4wj-q63q

<1.5.0-r0
  • L
GHSA-vqf4-7m7x-wgfc

<1.5.0-r0
  • L
GHSA-m4cv-j2px-7723

<1.4.2-r9
  • L
GHSA-f6hv-jmp6-3vwv

<1.4.2-r9
  • H
HTTP Response Splitting

<1.4.2-r9
  • C
Improper Input Validation

<1.4.2-r9
  • C
HTTP Request Smuggling

<1.4.2-r9
  • L
GHSA-38f8-5428-x5cv

<1.4.2-r9
  • H
HTTP Request Smuggling

<1.4.2-r9
  • L
GHSA-xxqh-mfjm-7mv9

<1.4.2-r9
  • L
Integer Overflow or Wraparound

<1.4.2-r9
  • L
CRLF Injection

<1.4.2-r9
  • L
GHSA-cm33-6792-r9fm

<1.4.2-r9
  • L
Resource Exhaustion

<1.4.2-r9
  • L
GHSA-45q3-82m4-75jr

<1.4.2-r9
  • L
Resource Exhaustion

<1.4.2-r9
  • L
GHSA-v8h7-rr48-vmmv

<1.4.2-r9
  • L
GHSA-mj4r-2hfc-f8p6

<1.4.2-r9
  • C
HTTP Request Smuggling

<1.4.2-r9
  • L
GHSA-57rv-r2g8-2cj3

<1.4.2-r9
  • L
Missing Release of Resource after Effective Lifetime

<1.4.2-r8
  • L
GHSA-rwm7-x88c-3g2p

<1.4.2-r8
  • L
CVE-2026-22751

<1.4.2-r8
  • L
GHSA-x2wq-9x2f-fhj7

<1.4.2-r8
  • L
GHSA-vxf7-qj7q-83fh

<1.4.2-r8
  • L
GHSA-wg35-8jpf-2xv3

<1.4.2-r8
  • L
GHSA-wwpq-f5c3-7hvx

<1.4.2-r8
  • L
GHSA-6p4f-wcwh-5vvm

<1.4.2-r8
  • L
CVE-2026-22741

<1.4.2-r8
  • L
CVE-2026-22740

<1.4.2-r8
  • L
GHSA-cvc6-q2cp-2xhw

<1.4.2-r8
  • L
CVE-2026-22745

<1.4.2-r8
  • L
CVE-2026-22746

<1.4.2-r8
  • L
GHSA-5843-p793-ghmm

<1.4.2-r8
  • M
CVE-2026-22748

<1.4.2-r8
  • L
CVE-2026-40973

<1.4.2-r8
  • L
GHSA-pwqr-wmgm-9rr8

<1.4.2-r7
  • L
GHSA-w9fj-cfpg-grvv

<1.4.2-r7
  • H
Allocation of Resources Without Limits or Throttling

<1.4.2-r7
  • L
HTTP Request Smuggling

<1.4.2-r7
  • L
GHSA-6hcq-hmm3-jj3c

<1.4.2-r5
  • L
CVE-2026-22732

<1.4.2-r5
  • L
CVE-2026-22737

<1.4.2-r5
  • L
GHSA-4773-3jfm-qmx3

<1.4.2-r5
  • L
CVE-2026-22735

<1.4.2-r5
  • L
GHSA-mf92-479x-3373

<1.4.2-r5
  • L
GHSA-72hv-8253-57qq

<1.4.2-r4
  • L
Arbitrary Code Injection

<1.4.2-r2
  • L
GHSA-rp46-r563-jrc7

<1.4.2-r2
  • L
CVE-2026-1225

<1.4.2-r2
  • L
GHSA-qqpg-mvqg-649v

<1.4.2-r2